Kunai

kunai

Vendor: Cybozu • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-23304 1Cybozu 1Kunai Jun 17, 2026 Feb 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations.
CVE-2017-2172 1Cybozu 1Kunai May 13, 2026 Jul 7, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2017-2109 1Cybozu 1Kunai May 13, 2026 Apr 28, 2017 N/A· v4 2.5 LOW· v3 2.6 LOW· v2 Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application.
CVE-2016-1187 1Cybozu 1Kunai May 13, 2026 Apr 21, 2017 N/A· v4 6.8 MEDIUM· v3 4.3 MEDIUM· v2 Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.
CVE-2012-4012 1Cybozu 1Kunai Apr 29, 2026 Sep 8, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code i...Show more The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.Show less
CVE-2012-4011 1Cybozu 1Kunai Apr 29, 2026 Sep 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.